Amendments to the Claims 

1. (Currently Amended) A method e^for tracking changes to a customer system in a 
managed hosting environment , the method comprising: 
detecting predetermined audit intervals to peform periodic audits: 
performing the periodic audits of the customer system in accordance with the 
predetermined audit intervals, the performing of the periodic audits 
includes by-executing an agent program that is resident on the customer 
system and that collects information audit data to be transferred to an 
application server connected with the customer system via a network; and 
determining wheth e r chang e s have been made to the software of the customer 
system by monitoring said information on the application server 

transferring the audit data to the application server, the application server to 

perform a comparison of the audit data with previous audit data to detect 
changes to the customer system . 



2. (Currently Amended ) The method of claim 1, wherein ^aid- the performing of the 
periodic audits comprisesr 

r e ading a pr e d e termined set of information from the customer syst e m; 
generating a sot of change data on the application server indicating changes that 

have boon mad e to the customer system since the last periodic audit by 

comparing the predetermined set of information to a pr e determined set of 

iftfe rmation record e d during a previous audit; and 
storing said change data the changes on a database server connected with the 

application server via a- the network. 

Application No.: 09/895,716 2 
Docket No. : 42P11148 




3. (Currently Amended )The method of claim 2, wherein said pr e determin e d set of 
informati en -the audit data comprises operating system files, file system, registry, 
and application software files of the customer system. 

4. (Currently Amended) The method of claim 2, wherein said change data is the 
changes are compressed and encrypted prior to being stored. 

5. (Currently Amended) The method of claim 1, further comprising: 

checking out the customer system from the application serve r, thereby allowing to 
allow the application server to make the changes to the-software of the 
customer system; 

suspending the periodic audi tin g audits : 

taking a first snapshot of the customer system; 

checking in the customer system when the changes to the software of the 

customer system have been completed; 
taking a second snapshot of the customer system; 

generating change data on the application server by comparing the first snapshot 

and the second snapshot; 
storing said -the change data on fl -the database serve r connected with the 

application server via a network ; and 
resuming the periodic auditin g audits . 

6. (Currently Amended )The method of claim 5, wherein eaid- the first and second 
snapshots comprise operating system files, file system, registry, and application 
software files of the customer system. 
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7. (Currently Amended) The method of claim 5, wherein s-a»d -the change data is 
compressed and encrypted prior to being stored. 

8. (Currently Amended) The method of claim 2, further comprising: 

reading a set of rules from a -the database serve r connect e d with the application 

server via a network ; 
applying the set of rules to the change data to determine whether any of said-the 

set of rules has been violated; and 
responsive to a violation of any of said -the set of rules, taking an action associated 

with a rule violated. 

9. (Currendy Amended) The method of claim 8, wherein said-the rules are stored on 
the database server. 

10. (Currently Amended) A system^ comprising: 

a customer system available to a customer in a managed hosting serve r, the 

customer system having an agent program to detect a predetermined audit 
intervals to perform periodic audits, to perform the periodic audits, and to 
collect audit data to be transferred to an application server ; 

an-the application server connected with said-the customer system via a network 
to generate change data based on audit data or snapshot data read from the 
customer system perform a comparison of the audit data with previous 
audit data to detect changes to the customer system : 
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a database server connected with said- the application server via o- the network to 

maintain a database of store change data gen e rated changes detected by 

the application server; 
a report server connected with satd-the database server via a- the network to 

generate reports based on the changed data changes stored on the database 

server; 

a command center connected with satd- the application server and satd -the report 
server via o- the network to retrieve reports from the report server. 

11. (Currently Amended) The system of claim 10, wherein said-customer system is 
further to executes an- the agent application program to that periodically collects 
audit data and collects snapshot data responsive to a request from the application 
server. 

12. (Currently Amended )The system of claim 10, wherein said- the application sever 
is further configur e d to: 

read a pred e termin e d set of information from the customer system; 

generate a set of change data indicating changes that have b ee n made to the 
custom e r system sinc e the last periodic audit by comparing the 
pr e determined set of information to a predetermined set of information 
recorded during a previous audit; and 

store said -the change data changes on the database server. 
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13. (Currently Amended) The system of claim 12, wherein said -the application server 
compresses and encrypts said change data the changes before storing the change 
data -changes on the database server. 

14. (Currently Amended) The system of claim 10, wherein satd -the application server 
is further configur e d to: 

check out the customer system , thereby allowin g to allow the application server to 

make the changes to the-software of the customer system; 
suspend the periodic auditin g audits : 
take a first snapshot of the customer system; 

check in the customer system when the changes to the software of the customer 

system have been completed; 
take a second snapshot of the customer system; 

generate change data by comparing the first snapshot and the second snapshot; 
store said-the change data on the database server; and 
resume the periodic auditin g audits . 

15. (Currently Amended) A machine-readable medium having stored thereon data 
representing sequ e nces sets of instructions , said sequences of instructions which, 
when executed by a processo r machine , cause said processor the machine to: 
detect predetermined audit intervals to perform periodic audits; 

perform the periodic audits of the customer system in accordance with the 
predetermined audit intervals, the performing of the periodic audits 
includes b v^xecuting an agent program that is resident on the customer 
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system and that collects information audit data to be transferred to an 
application server connected with the customer server via a network; and 
determine whether changes have b e en made to the softwar e of the customer 
system by monitoring said information on the application serv e r 

transfer the audit data to the application server, the application server to perform a 
comparison of the audit data with previous audit data to detect changes to 
the customer system . 

16. (Currently Amended) The machine-readable medium of claim 15, wherein said 
the performing of the periodic audits comprisesT 

r e ading a pr e determined set of information from the custom e r syst e m; 
generating a set of change data on the application server indicating changes that 

have boon made to the customer system since the last periodic audit by 

comparing the predetermined set of information to a predetermined set of 

information recorded during a previous audit; and 
storing said change data the changes on a database server connected with the 

application server via a -the network. 

17. (Currently Amended) The machine-readable medium of claim 16, wherein said 
predetermined set of informat ien -the audit data comprises operating system files, 
file system, registry, and application software files of the customer system. 
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18. (Currently Amended) The machine-readable medium of claim 16, wherein said 
change data the changes are is compressed and encrypted prior to being stored. 

19. (Currently Amended )The machine-readable medium of claim 15, further 
comprising: wherein the sets of instructions which, when executed by the machine, 
further cause the machine to: 

checlcing check out the customer system from the application serve r, thereby 
allowin g to allow the application server to make the changes to the 
software of the customer system; 

suspending suspend the peri odi c auditin g audits ; 

talcing take a first snapshot of the customer system; 

ch e clcing check in the customer system when the changes to the software of the 

customer system have been completed; 
talcing take a second snapshot of the customer system; 

generating generate change data on the application server by comparing 
the first snapshot and the second snapshot; 

storing store s aid- the change data on a-the database serve r connected with the 
application server via a network ; and 
resuming resume the periodic auditin g audits . 

20. (Currently Amended) The machine-readable medium of claim 19, wherein said 
the first and second snapshots comprise operating system files, file system, 
registry, and application software files of the customer system. 
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21. (Currently Amended )The machine-readable medium of claim 19, wherein said 
the change data is compressed and encrypted prior to being stored. 

22. (Currently Amended) The machine-readable medium of claim 16, further 

comprising : wherein the sets of instructions which, when executed by the 
machine, further cause the machine to: 

r e ading read a set of rules from a-the database serve r connected with th e 
application server via a network ; 

applying apply the set of rules to the change data to determine whether any of said 

the set of rules has been violated; and 
responsive to a violation of any of said -the set of rules, taktBg-take_an action 

associated with a rule violated. 

23. (Currently Amended) The machine-readable medium of claim 22, wherein said 
the rules are stored on the database server. 
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